This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft File: mFDq_-09ooRdUfCVrBEkUIjVYj8.mft (raw, json) Hash identifier: b/+/a7CL0jmkF8EDnhY3fVo+1Z8bbZdge4QDy6kFi7I= Subject key identifier: F2:B7:B7:B8:5F:35:D0:B4:A0:64:E2:F5:12:56:4E:D2:CA:38:05:FB Authority key identifier: 98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F Certificate issuer: /CN=A91678AA/serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft Manifest number: 29 Signing time: Fri 05 Dec 2025 05:31:01 +0000 Manifest this update: Fri 05 Dec 2025 05:31:00 +0000 Manifest next update: Fri 12 Dec 2025 05:31:00 +0000 Files and hashes: 1: mFDq_-09ooRdUfCVrBEkUIjVYj8.crl (hash: Q99K6c4q6uNP7ZYYttTPHWVUVFFfJfhcObEpfLxHodY=) 2: ACA405589E7011F083978F1AC4F9AE02.roa (hash: YmblmfroJEPUhmWz7o6a8qxz0P00eBgbcYH8HDNSw40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91678AA, serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F Validity Not Before: Dec 5 05:31:00 2025 GMT Not After : Dec 12 05:31:00 2025 GMT Subject: CN=69326e14-e5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:71:cb:82:41:b0:66:c6:e4:49:ac:42:e3: 71:3c:fb:3c:a3:49:18:c6:ef:ef:eb:02:32:be:c8: 24:e3:5e:62:ea:5d:0f:38:c4:68:b4:91:be:7d:a2: 8f:b2:2a:6a:1e:60:d2:99:85:c7:f6:0b:1c:0f:28: 2b:ea:3a:92:4f:d2:ac:d8:cb:42:54:5b:dd:56:95: e7:b8:f8:ba:c2:9f:33:04:3b:84:a2:ff:34:96:88: cb:87:93:f4:15:0f:ab:92:e3:86:34:31:b2:1a:12: 69:ae:de:85:2c:f3:59:69:c7:d6:0d:b1:f0:f1:75: 85:cd:19:3b:d4:5d:30:38:83:cc:ba:38:39:52:7f: 44:70:5f:49:df:2c:57:74:80:af:44:ba:24:a8:7d: c0:83:a1:e8:e0:7a:12:36:c7:e5:1e:04:8e:e8:04: bf:ca:86:f6:14:b2:24:25:69:d2:47:36:36:13:89: e1:b7:94:d5:b5:f8:86:aa:b3:10:b1:dd:0a:15:18: 3f:f4:d1:3a:14:06:a7:9b:ad:d6:67:16:69:a5:da: 10:cf:38:9f:48:94:f7:3e:6f:47:b7:51:e3:8d:82: a3:61:c8:96:4a:be:88:70:35:9b:0a:51:b8:e2:9e: 32:c8:2c:81:11:1a:11:c4:ce:90:a9:38:c7:58:6e: b2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B7:B7:B8:5F:35:D0:B4:A0:64:E2:F5:12:56:4E:D2:CA:38:05:FB X509v3 Authority Key Identifier: keyid:98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:f1:ef:8f:7f:6a:cd:84:45:9b:34:47:78:25:50:ba:8e:db: ba:4f:05:97:a1:68:ba:a4:b1:ef:46:9c:fa:77:3b:b2:44:ac: 90:ed:80:5a:ec:f4:2c:ea:40:ef:64:84:aa:78:f4:f8:94:3c: a0:b9:3c:69:1d:20:4f:b5:0b:b4:65:d7:9f:c2:d4:08:c4:d6: fd:18:3f:3c:97:58:48:b0:f0:5c:a8:68:b7:cd:4b:75:ca:9e: 7e:a5:60:45:d6:3f:32:c9:b5:c3:3c:fe:e6:49:56:d9:ae:04: 1f:28:89:51:f8:92:e7:98:78:f2:a8:d4:e8:92:78:d4:57:27: 7d:4a:c3:95:af:42:d8:f7:cc:1d:95:26:8d:f3:40:8b:1f:6a: 50:73:3f:a5:aa:9e:36:4d:7c:dd:e5:18:14:ac:10:2d:36:e6: eb:ed:26:71:8e:08:bf:8e:ee:ce:ac:57:ad:07:20:76:63:f8: f6:ed:ec:0e:b6:5a:c1:ba:21:e0:21:5e:f5:7c:bf:68:23:4a: 59:13:de:1e:8f:83:a0:f7:e0:21:51:d9:4b:0d:a2:61:8f:16: 98:cb:ee:ca:bf:23:92:4b:f0:c4:ea:0c:dc:07:2f:d0:89:9f: 3e:03:7b:f9:b2:fe:b8:48:08:85:b3:41:32:f6:79:d0:ae:aa: 37:7e:fd:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzhBQTExMC8GA1UEBRMoOTg1MEVBRkZFRDNEQTI4NDVENTFGMDk1QUMxMTI0NTA4 OEQ1NjIzRjAeFw0yNTEyMDUwNTMxMDBaFw0yNTEyMTIwNTMxMDBaMBgxFjAUBgNV BAMTDTY5MzI2ZTE0LWU1ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBJHHLgkGwZsbkSaxC43E8+zyjSRjG7+/rAjK+yCTjXmLqXQ84xGi0kb59oo+y KmoeYNKZhcf2CxwPKCvqOpJP0qzYy0JUW91Wlee4+LrCnzMEO4Si/zSWiMuHk/QV D6uS44Y0MbIaEmmu3oUs81lpx9YNsfDxdYXNGTvUXTA4g8y6ODlSf0RwX0nfLFd0 gK9EuiSofcCDoejgehI2x+UeBI7oBL/KhvYUsiQladJHNjYTieG3lNW1+IaqsxCx 3QoVGD/00ToUBqebrdZnFmml2hDPOJ9IlPc+b0e3UeONgqNhyJZKvohwNZsKUbji njLILIERGhHEzpCpOMdYbrLDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8re3uF81 0LSgZOL1ElZO0so4BfswHwYDVR0jBBgwFoAUmFDq/+09ooRdUfCVrBEkUIjVYj8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3OEFBLzM3QzgxN0ZDOTc0 NDExRjA4MDRBNTkxOEM0RjlBRTAyL21GRHFfLTA5b29SZFVmQ1ZyQkVrVUlqVllq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUZEcV8tMDlvb1JkVWZDVnJCRWtVSWpWWWo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 OEFBLzM3QzgxN0ZDOTc0NDExRjA4MDRBNTkxOEM0RjlBRTAyL21GRHFfLTA5b29S ZFVmQ1ZyQkVrVUlqVllqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHHx749/as2ERZs0R3glULqO27pPBZehaLqkse9GnPp3O7JErJDtgFrs 9CzqQO9khKp49PiUPKC5PGkdIE+1C7Rl15/C1AjE1v0YPzyXWEiw8FyoaLfNS3XK nn6lYEXWPzLJtcM8/uZJVtmuBB8oiVH4kueYePKo1OiSeNRXJ31Kw5WvQtj3zB2V Jo3zQIsfalBzP6WqnjZNfN3lGBSsEC025uvtJnGOCL+O7s6sV60HIHZj+Pbt7A62 WsG6IeAhXvV8v2gjSlkT3h6Pg6D34CFR2UsNomGPFpjL7sq/I5JL8MTqDNwHL9CJ nz4De/my/rhICIWzQTL2edCuqjd+/fQ= -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:24 2025 by rpki-client